CVE-2026-82466 Rodauth before 2.46.0 Authentication Bypass via webauthn_login

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...

PT-2026-83446

Name of the Vulnerable Software and Affected Versions Rodauth versions prior to 2.46.0 Description An authentication bypass exists in the 'webauthn login' route. Logged-in users can authenticate as any other account due to improper account resolution logic. The system incorrectly falls back to...

Fedora 43 : webkitgtk (2025-6f3e9e3af6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f3e9e3af6 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...